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ABSTRACT 



Figure 2A illustrates an application layer security system (200) according to an embodiment of the 
invention. Particularly, protective layer (210) is implemented between a distrusted environment and 
trusted environment including one or more applications residing on one or more web servers (220). 
Protective layer (210) protects trusted applications from maliciious operation requests sent via a 
distruted source. Each incoming operation request can comprise a plurality of requested commands, 
parameters, and parameter values to be performed by and application. Incoming operation requests 
may be received as external HTTP traffic via one or more ports (230). Security system (200) includes 
tunnels (240) to support single, distributed, or share applications. Tunnels (240) are protocol based, 
e.g., TCP/IP, connections between the distrusted and trusted environments. Each tunnel (240) can 
implement and validate a specified application protocol, such as, for example, HTTP, HTTPs, SOAP. 
System (200) further includes one or more pipes (250) to provided to protect or monitor functionality 
of the applications, and the system also includes web applications (260). Further, web applications 
(260) can customize pipes execution to specific application paths. 
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